Hacker News Reader

> exposed ten individuals’ details including names, dates of birth, passport numbers, and the details of up to 50 HAL aviation security personnel

I think this is significant especially in an environment where GDPR non-compliance can penalize American companies for millions/billions. I would say compromising the identity of security personnel that could be exploited for a physical attack should deemed even more harmful and fined at a higher rate.

View on HN

As is, this fine probably doesn’t cover the salary of a junior security researcher for one year to discover vulnerabilities and enforce best practices that could have prevented things like this. The message seems to be don’t bother actually securing your systems if you are a European outfit.

£60k is a relatively decent IT salary in the UK.

It's probably a couple of junior security researchers.

But your point is still valid.

£60k gross salary for an employee might come at a £100k cost for the company when you add in NICs, pensions, HR costs, training, provision of equipment and office space.

Reply on news.ycombinator.com